Currently MeshPolicy and ClusterRbacConfig are cluster wide resources and therefore incompatible with multi-tenant behaviour, we need to ensure these can be configured separately per service mesh.

There are two alternative solutions

• Keep the upstream names but make their CRDs namespaced
• Replace these resources with alternatives such as ServiceMeshPolicy and ServiceMeshRbacConfig

The first would likely be simpler to implement but lead to clashes with upstream installations whereas the second would be a more invasive change for ourselves and likely also the Kiali team

FYI mwringe, this is the issue we have been discussing